Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2022-25647

CVSS 3.1
7.5 high
EPSS
12%p96
Published
·
Modified
Analyze CVE-2022-25647 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

Vendors
googledebiannetapporacle
Products
gson, debian linux, active iq unified manager, financial services crime and compliance management studio, graalvm, retail order broker
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (12.2%)

In the news

2 stories